1. The browser theme builder
Images selected in the public builder are decoded, previewed, cropped, color-analyzed, compressed and packaged in your browser. CodexSkin does not upload those images to a server. The resulting file is downloaded directly to your device.
2. Website analytics
The site includes a privacy-conscious page-view script from click.pageview.click. It counts page views and bounded interaction events without receiving image bytes, typed form values, filenames or pet names. Google Analytics 4 is enabled only after you choose to allow it. That preference is stored in your browser’s local storage. Analytics is used to improve navigation and content, not to build advertising profiles.
Bounded interaction event names are sent to click.pageview.click; after consent, the same events are also sent to Google Analytics 4. They may state that a photo was selected, gallery filter used, local validation completed, Codex handoff opened, channel caption copied, checkout started or paid download requested. They exclude typed search terms, filenames, pet names, image bytes, checkout session IDs and private content.
3. Payments
Digital-product and custom-design checkout is hosted by Stripe for Shinstar LLC. Stripe processes payment-card details, billing information, fraud signals and the email used for your receipt. CodexSkin receives order identifiers, payment status and customer contact details needed to deliver the download or service. We do not receive your complete card number.
After Stripe confirms a paid order, a private Feishu operations channel receives the product, amount, fulfillment type, locale and shortened Stripe references so the order can be delivered. Server failures may send the request method, path, Cloudflare Ray ID and a compact error summary to a separate private channel. These alerts exclude complete card details, full checkout identifiers, URL query strings, request bodies, private artwork and Codex content.
4. Email and custom artwork
When you email us, we receive the address, message and attachments you send. Custom artwork is used to prepare the ordered design and provide support. Do not send material you are not permitted to share. Project files may be retained while the service is active and for a reasonable support period, then deleted when they are no longer needed for delivery, accounting or a legal obligation.
5. Technical logs
Cloudflare may process IP address, user agent, request time and security signals to deliver the site, prevent abuse and diagnose failures. These logs are not used to read Codex conversations, local files, API keys or model-provider settings.
6. Your choices
You can decline Google Analytics, clear the saved analytics preference in browser storage, use the builder without an account and request access, correction or deletion of information associated with an email order, subject to legal retention requirements.
7. Contact
Questions and privacy requests can be sent to contact@codexskin.org. Include enough detail to locate the relevant message or order, but do not send identity documents unless requested through a secure channel.